{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "data breach", "trigger": true, "arguments": ["purpose", "time", "place", "number of data", "attack pattern", "compromised data", "victim", "attacker", "tool"]}, {"event_type": "phishing", "trigger": true, "arguments": ["trusted entity", "victim", "damage amount", "tool", "place", "attack pattern", "purpose", "attacker"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["supported platform", "vulnerability", "common vulnerabilities and exposures", "vulnerable system", "vulnerable system version", "releaser", "time", "patch number", "issues addressed", "patch"]}, {"event_type": "ransom", "trigger": true, "arguments": ["attack pattern", "victim", "place", "damage amount", "price", "attacker", "time"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["capabilities", "vulnerable system version", "supported platform", "common vulnerabilities and exposures", "vulnerable system", "vulnerability", "discoverer", "time"]}], "input": "Internet Storm Center reports that some malicious messages tied to Locky are showing fake alerts stating that the HoeflerText font needs to be installed ."}
{"data breach": [], "phishing": [{"trigger": "showing fake alerts", "arguments": {"trusted entity": "NAN", "victim": "NAN", "damage amount": "NAN", "tool": ["Locky", "malicious messages"], "place": "NAN", "attack pattern": "NAN", "purpose": "NAN", "attacker": "NAN"}}], "patch vulnerability": [], "ransom": [], "discover vulnerability": []}